Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6695063-4f8f-4cac-a4de-3f323b178f73.roa
File:                     a6695063-4f8f-4cac-a4de-3f323b178f73.roa (raw, json)
Hash identifier:          Tb635Hr0tWJZ3yKefgxgut7G7MWRLjQS/x3YeKJzG1E=
Subject key identifier:   A0:BE:44:85:1F:8F:DF:0B:A3:88:67:81:79:E9:57:C9:22:CC:C4:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F43EB0A189A7E8C8D55DD554661517D42D65BB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6695063-4f8f-4cac-a4de-3f323b178f73.roa
Signing time:             Fri 17 Oct 2025 20:30:29 +0000
ROA not before:           Fri 17 Oct 2025 20:30:29 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:81c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:43:eb:0a:18:9a:7e:8c:8d:55:dd:55:46:61:51:7d:42:d6:5b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 17 20:30:29 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=c1f4cf485929b8826966c2da418fd74c3b2cf9a3b766384f6633cfa64d49301b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:d2:10:96:7d:1d:05:c7:29:10:ae:ec:5e:
                    a4:63:2a:14:36:2b:23:42:ea:63:a7:94:40:ec:5b:
                    fd:60:d7:01:1e:91:07:3b:e7:3d:07:ac:b7:dc:9e:
                    91:54:e4:50:16:37:92:c5:78:f4:e4:38:62:43:63:
                    7a:f0:18:52:33:24:f8:0e:6e:f5:e9:17:f7:9a:08:
                    82:73:66:1c:95:87:7d:fc:77:89:10:ec:fc:6d:64:
                    b8:f6:cd:c9:5f:85:f6:1e:04:ad:39:46:ae:bf:e1:
                    86:d9:f8:16:74:79:28:6e:ae:22:c7:0c:c9:44:7f:
                    38:f0:cf:24:a2:4e:e4:59:ea:75:d2:b9:d1:22:63:
                    27:36:9b:68:b3:7f:62:07:98:1e:51:23:2e:47:52:
                    1b:f1:b4:4f:3a:93:8a:a8:21:1c:cf:82:e1:4e:39:
                    2a:37:69:04:bd:7f:d2:a9:9c:77:cc:ca:98:03:69:
                    6f:59:bc:06:5a:5d:68:e1:68:1d:83:b2:3b:4b:eb:
                    4d:35:41:85:f2:35:38:56:b5:d0:e7:5d:b3:55:93:
                    07:63:30:d1:59:26:bf:c7:8f:f7:fb:30:b1:50:ff:
                    e4:2c:1c:1a:63:46:cb:5f:09:74:d8:4e:c3:97:01:
                    73:6e:86:01:a3:ac:e7:4f:e4:88:25:19:93:bb:06:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BE:44:85:1F:8F:DF:0B:A3:88:67:81:79:E9:57:C9:22:CC:C4:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6695063-4f8f-4cac-a4de-3f323b178f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:08:a1:8a:41:04:32:0d:3f:d4:e1:a6:d7:50:17:f2:75:
         46:04:25:db:ce:50:8b:b1:ea:52:a6:fd:e0:46:25:50:da:a5:
         53:64:51:f6:98:3e:05:b7:d2:7d:cc:0e:03:36:89:8a:20:32:
         f0:39:a8:8b:62:95:b3:de:35:17:72:b2:76:49:2f:ee:90:57:
         de:8e:ba:b3:f3:71:38:40:06:6f:77:5d:10:20:28:25:81:a0:
         40:36:4b:2c:f3:d1:c2:c3:a4:ee:f7:8a:8c:5e:67:20:89:64:
         45:e0:62:f6:9c:3c:a5:29:39:a9:8f:be:33:b5:62:9c:fa:2c:
         6e:25:16:91:c7:f0:91:59:ac:45:5a:a8:71:9c:2d:c0:bb:d9:
         5a:85:5f:d1:c5:ca:e4:4c:30:e7:08:6d:dc:7e:ea:98:b4:ba:
         13:80:22:61:66:9f:a7:da:cf:db:92:56:6a:32:2c:65:09:10:
         1e:e0:1d:e2:7b:a3:da:8c:c6:8c:ee:f5:ae:94:13:89:2a:a4:
         6e:da:41:8e:3a:fb:2b:fb:c9:ad:91:9d:24:75:55:13:c7:65:
         ab:9e:25:12:ec:35:04:5e:a9:e5:c4:13:a2:d3:5d:c7:46:3d:
         e4:e3:5f:10:d1:7d:5a:80:ff:99:0e:d5:d1:6b:df:a6:62:00:
         f8:b9:41:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----